I had to do that and enabling the forwarding of the authentication agent with the -A option in the ssh client was very handy: $ ssh -A -t office_user@office ss

I had to do that and enabling the forwarding of the authentication agent with the -A option in the ssh client was very handy: $ ssh -A -t office_user@office ssh production_user@production I have the same private key in all my machines, so this worked transparently avoiding the IP restriction of iptables of the production machine.